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RANDOM NUMBER GENERATORS IMPLEMENTED WITH CELLULAR 

AUTOMATA 

RELATED APPLICATIONS 

The following applications of the common assignee, which are hereby 
incorporated by reference, may contain some common disclosure and may relate to 
the present invention: 

U.S. Patent Application Serial No. / , entitled "SOFTWARE 

IMPLEMENTATION OF CELLULAR AUTOMATA BASED RANDOM 
NUMBER GENERATORS" (Attorney Docket No. 10019023-1); and 

U.S. Patent Application Serial No. / , entitled "TRUTH TABLE 

CANDIDATE REDUCTION METHOD FOR CELLULAR AUTOMATA BASED 
RANDOM NUMBER GENERATORS" (Attorney Docket No. 1001 10346-1). 

FIELD OF THE INVENTION 

This invention relates generally to random number generation. More 
specifically, this invention relates to systems and methods to generate cellular 
automata based random number generators (CA-based RNG). 

BACKGROUND OF THE INVENTION 

Since the inception of computers, random numbers have played important 
roles in areas such as Monte Carlo simulations, probabilistic computing methods 
(simulated annealing, genetic algorithms, neural networks, and the like), computer- 
based gaming, and very large scale integration (VLSI) chip-testing. The bulk of the 
investigation into random (more properly, pseudo-random) number generation 
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methods has been centered around arithmetic algorithms. This is because the 
prevalent computing medium has been the general purpose, arithmetic computer. 
Digital hardware designers have long relied on feedback shift registers to generate 
random numbers. 

With the advent of VLSI design, built-in self-tests have become advantageous. 
In this design, the bulk of the chip testing system is incorporated on the chip itself. 
Linear feedback shift registers were used initially to implement the random number 
generation portion of the built-in self-test. 

In 1986, Wolfram (S. Wolfram, "Random sequence generation by cellular 
automata," Advances in Applied Mathematics, vol. 7, pp. 123-169, June 1986) 
described a random sequence generation by a simple one-dimensional (1-d) cellular 
automata with a neighborhood size of three. The work focused on the properties of a 
particular CA-based RNG identified as "CA30," so named due to the decimal value of 
its truth table. Statistical tests indicated that the CA30 was a superior random number 
generator to the ones based on linear feedback shift registers. Wolfram suggested that 
efficient hardware implementation of the CA30 should be possible. 

Hortensius et al. (P. D. Hortensius, R. D. McLeod, and H. C. Card, "Parallel 
number generation for VLSI systems using cellular automata," IEEE Transactions on 
Computers, vol. 38, no. 10, pp. 1466-1473, October 1989) described the use of CA30 
as a random number generator in an Ising computer. They also described using 
combinations of CAs (CA90 and CA150), which generated even better random 
numbers than the CA30. They further indicated that time and site spacing may 
improve statistical quality of random numbers generated by the CA. Time spacing is 
where the RNG is advanced more than one step between random number samples and 
site spacing is where not every bit value generated is used. 
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In the above conventional methods, no systematic way of fabricating a high 
quality CA-based RNGs exists. 

SUMMARY OF THE INVENTION 

In one respect, an embodiment of a method of implementing a cellular 
automata based random number generator (CA-based RNG) may include determining 
an interconnection topology. The interconnection topology may be explicitly dictated 
or may be generated based on inputs such as the number of neighborhood 
connections, length of the random number generator, and the like. The method may 
also include screening a CA-based RNG candidate based on the interconnection 
topology. Through the screening process, the candidate RNG may be kept for further 
testing or rejected because it is unlikely to pass the subsequent testing. The method 
may further include subjecting the CA-based RNG candidate through a suite of tests 
in response to the CA-based RNG passing the screening step. 

In another respect, an embodiment of a CA-based RNG implementing-module 
may include an interconnection topology-determining-module determining an 
interconnection topology. The interconnection topology-determining-module may 
receive inputs and generate one or more topologies based on the inputs. The CA- 
based RNG implementing-module may also include a screening-module screening a 
CA-based RNG candidate for the interconnection topology. Through screening, the 
screening-module may reject candidate RNGs that are unlikely to pass the suite of 
random number tests. The CA-based RNG implementing-module may further include 
a testing-module subjecting the CA-based RNG candidate through a suite of tests in 
response to the CA-based RNG passing through the screening-module. 



HP Docket No.: 10017475-1 



3 



BRIEF DESCRIPTION OF THE DRAWINGS 

Features of the present invention will become apparent to those skilled in the 
art from the following description with reference to the drawings, in which: 

Figure 1A illustrates an exemplary truth table for a four-input cellular 
automata cell and the naming notation for the cellular automata; 

Figure IB illustrates an exemplary implementation of a cell of a cellular 
automata; 

Figure 1C illustrates an exemplary notation, a relative displacement notation, 
which provides a connection information of a CA cell; 

Figures 2A - 2C illustrate exemplary effects of periodic boundary conditions 
on connections for one, two, and three dimensional CA networks, respectively; 

Figures 3A and 3B illustrate exemplary embodiments of methods of 
generating CA-based RNGs; 

Figure 4A illustrates an exemplary embodiment of a CA-based RNG 
implementing-module; 

Figure 4B illustrates an exemplary embodiment of the topology-determining- 
module of Figure 4A; 

Figure 4C illustrates an exemplary embodiment of the screening-module of 
Figure 4A; and 

Figure 4D illustrates an exemplary embodiment of the entropy-calculating- 
module of Figure 4C. 

DETAILED DESCRIPTION 

For simplicity and illustrative purposes, the principles of the present invention 
are described by referring mainly to exemplary embodiments thereof. However, one 
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of ordinary skill in the art would readily recognize that the same principles are equally 
applicable to many situations in which random numbers generators are determined. 

I. Cellular Automata 
5 Cellular automata (CA) may be thought of as a dynamic system discrete in 

both time and space. CA may be implemented as an array of cells with homogeneous 
functionality constrained to a regular lattice of some dimension. For example, in one- 
dimension, the lattice could be a string (open-ended) or a ring (close-ended), or in 
two-dimensions, the lattice could be a plane (open-ended) or a toroid (close-ended). 
10 Open-ended CAs have boundaries that are fixed and close-ended CAs have 
boundaries that are periodic. 

Each cell in the CA has a state that is updated as a function of its neighbor 
connections at each time step. In other words, the state of a CA at time t depends on 
the states of the connected neighbors at time t - 1. For a binary CA cell with a 

15 neighborhood size of N, there are 2^ N possible functions. Table 1 illustrates the 

numbers involved. As Table 1 shows, the universe of possible functions increases 
extremely rapidly as the number of neighbors N grows. 



Neighborhood size N 


# of Possible Functions 


1 


4 


2 


16 


3 


256 


4 


65,536 


5 


4,294,967,296 


6 


1.84 x 10 iy 


7 


3.4 x 10 J8 



20 Table 1 

A function of a CA cell may be represented as a truth table. Figure 1A shows 
an exemplary truth table for a four-input CA cell. Figure IB shows an exemplary 
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implementation of a cell of the CA. As shown, the cell i implicitly includes a one-bit 
register. In this instance, there are 16 possible conditions to which a cell may respond 
(the neighborhood size N is 4 corresponding to the number of inputs). The number of 
unique responses is therefore 2 16 or 65,536 (see also Table 1). In other words, there 
5 can be 65,536 unique four-input machines for a given interconnection topology. 

Referring back to Figure 1A, a notation is provided to identify the CA 
implementing the above function. In essence, the output of the truth table is used as 
the identification in conjunction with the interconnection notation. As shown, the 
output of the truth table is converted to a number (from binary to base 16 to decimal). 

10 The CA represented by the truth table in Figure 1 A is denoted to be CA06990. 

As indicated before, a CA may be made of multiple cells, and the inputs of 
one cell may connected to the output of other cells. There may even be a feedback 
contact meaning that one of the inputs of the cell is connected the output of the cell 
itself. Thus, to uniquely identify a CA, the interconnection topology information 

15 should also be provided in addition to it's truth table representation. Figure 1C 
illustrates an exemplary notation, relative displacement notation, which indicates the 
interconnection topology information of cell i, i.e., how far away the connecting cells 
are relative to a given four-input cell L 

With references to Figures 2A - 2C, the effect of periodic boundary conditions 

20 on connections for one-, two-, and three-dimensional CA networks will be described 
below. In all three examples, 64-cell automata are illustrated. With 64 cells, the cells 
may be arranged as 64-cell long one-dimensional CA, a 8x8 two-dimensional CA, or 
a 4x4x4 three-dimensional CA, One of ordinary skill in the art will recognize that the 
number of cells is not limited to 64. In addition, the number of dimensions may be 

25 more than three. 
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Figure 2A illustrates a 64-cell one-dimensional ring automata network with a 
displacement of (-1, 0, 1, 2) from the perspective of cell 0. In this instance, each cell i 
is assumed to have the same displacement value. In a one-dimensional ring CA 
network, each cell i has two adjacent neighbors, one on either side. Because the CA 
5 network is periodic, cell 63 is adjacent to the cell 0, and thus the displacement of i - 1 
from cell 0 lands on cell 63. 

In a one-dimensional CA network, a relative displacement value (-1, 0, 1, 2) 
indicates that dg input of cell i is connected to the output of the cell i - 1 (one cell to 
the left), the cU input is connected to the output of the cell i itself, the d 2 input to cell 
10 i + 1, and the di input to cell i + 2. More specifically, from the perspective of cell 0, 
the inputs dg, d4, d 2 , and di are connected to the outputs of cell 63, itself, cell 1, and 
cell 2, respectively. 

Figure 2B illustrates a 64-cell two-dimensional automata network, also with 
periodic boundary conditions. In a two-dimensional toroidal CA network, each cell i 

15 has four directly adjacent neighbors, two in each of the two directions. For example, 
cell 7 is adjacent to cells 6 and 0 in a first direction. Cell 7 is also adjacent to cells 15 
and 63 in a second direction. The adjacency to cells 0 and 63 is due to the periodic 
boundary condition. A periodic two-dimensional CA may be visualized as a toroid. 

For the two-dimensional CA network, compass directions n, s, e, and w may 

20 be used to indicate the connection. For example, a displacement value for a cell in the 
64-cell two-dimensional CA network may be (nw, c, ne, s), where c stands for center 
or itself. In the instance, from the perspective of cell 7, the inputs dg, cU, d 2 , and di 
would be connected to the outputs of cells 62, itself, cell 56, and cell 15, respectively. 
One of ordinary skill in the arts will recognize that the displacements are not 

25 necessarily limited to one step in any direction. 
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Figure 2C illustrates a 64-cell three-dimensional automata network, again with - 
periodic boundary conditions. In a three-dimensional periodic CA network, each cell 
i has six directly adjacent neighbors, two in each of the three directions. For example, 
cell 3 is adjacent to cells 2 and 0 in a first direction, to cells 7 and 15 in a second 
5 direction, and to cells 19 and 51 in a third direction. The adjacency to cells 0, 15, and 
51 is due to the periodic boundary condition. Like the situation with the two- 
dimensional CA, one of ordinary skill in the arts will recognize that the displacements 
are not necessarily limited to one step in any direction. 

In addition, while the neighborhood size N being 4 has been illustrated, one of 

s ^ 10 ordinary skill in the arts will recognize that N can be of any size in theory. 

v=P 

'i isf 

:.y II. Determining CA-based RNG Candidates 

TO 

CP Figure 3 A illustrates an exemplary method 300 to generate a CA-based RNG. 

i F * The method 300 may be categorized as carrying out three broad processes of 

U 

it 15 determining an interconnection topology, screening CA-based RNG candidates based 

ss. 

; t! 

■ 1 on the interconnection topology, subjecting the RNG candidates through a suite of 

tests for those that pass the screening process. These are repeated for different 
interconnection topologies. 

Broadly, in step 310, the method 300 determines an interconnection topology. 

20 Then in step 315, for the topology determined in step 310, a candidate CA-based 
RNG is determined. In step 320, the candidate RNG is screened. If the candidate 
RNG does not pass the screening process, then the method 300 proceeds to step 330. 
If the candidate RNG does pass the screening process, then in step 325, the candidate 
RNG is sorted. In this step, it may be that only a limited number of candidates may 

25 be kept, for example 100 top candidate RNGs. The method 300 then proceeds to step 
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330. In step 330, it is determined whether or not there are more candidate RNGs for 
the given topology determined at step 310. If so, the method 300 returns to step 315. 
If not, then the method proceeds the step 335. 

In step 335, a candidate RNG that passed the screening process is retrieved, 
5 then in step 340, the candidate RNG is subjected to a suite of random number 
generating tests, such as the DIEHARD suite. If the candidate RNG passes the suite 
of tests, it is accepted as a viable CA-based RNG in step 345. If not, the candidate 
RNG is rejected in step 350. Then in step 355, it is determined whether more 
candidate RNGs exist. If so, the method 300 returns to step 335. If not, then the 

10 method 300 proceeds to step 360. 

In step 360, it is determined if more topologies exist. If so, then the method 
300 returns to step 310. If not, the method 300 ends. 

Note that the method 300 only an exemplary method to generate CA-based 
RNGs. The steps outlined may be performed in different order, modified, or deleted, 

15 or other steps may be added. For example, Fig. 3B illustrates a second method 300-2 
to generate CA-based RNGs. An important aspect of the methods is that either 
method 300 or 300-2 is capable of exhaustively considering CA-based RNG for any 
given topology. In addition, either method is also capable of exhaustively considering 
interconnection topologies for a given neighborhood size N. 

20 In the following, some of the steps of the methods 300 and/or 300-2 are 

explained in detail. In step 310, the interconnection topology may be based on the 
number cells that make up a cellular automata. The number of cells typically 
corresponds with the length of the random number generated. For example, a 64-cell 
CA is capable of generating a 64-bit random number. The length may be 32, 128, 
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256, etc. One of ordinary skill will recognize that the length of the CA may be a user 
settable parameter, and need not be limited purely to exponentials of the number 2. 

The interconnection topology may also be based on the neighborhood size N, 
which is the number of inputs to a cell, for example 4. Again, one of ordinary skill 
will recognize that the neighborhood size N may be a user settable parameter. The 
interconnection topology may be represented by the notations provided above. For 
example, using N = 4, the displacement value for a cell for a CA-network may be 
represented by the notation (dg, cU, d2, di) where dx represents relative displacement 
from the current cell as described above. 

The CA may be under a periodic boundary conditions in all dimensions. In 
this instance, all cells of the CA may have the exactly same topology, i.e., have the 
identical displacement values. This is the simplest case since there are no special case 
end cells to deal with. 

There may be other conditions specified on the topology. For example, one of 
the inputs to a cell may be required to be connected to its output. In other words, one 
input has a displacement value of "0" or "c" depending on the dimensions of the CA. 
This has practical implications. For instance, the CA-based RNG may be 
implemented with electrical elements such as the field programmable gate arrays 
(FPGAs). Typically, it is easier to fabricate FPGAs, or any other electrical elements, 
which have fewer connections to external elements. By specifying an element which 
has an input tied to its own output, the number of external connections is reduced. 

Another condition that may be specified on the topology is that at least one of 
the inputs of the cell be connected to another cell with a displacement distance that 
cannot be evenly divided into the length of the CA. This ensures that a chain of 
connections, at least through that input, touches all cells of the CA. For example, 
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again assume N = 4 and the number of cells in the CA is 32. Also assume that one of 
the displacements, such as dg, is 2, i.e., the displacement is given as (2, xi, X2, X3)! In 
this instance, we note that the dg chain does not touch all cells. Starting from cell 0, 
the dg input is connected to the output of cell 2, whose dg input is connected to the 
output of cell 4, and so on such that eventually, the dg input of cell 30 is connected to 
cell 0. All odd numbered cells are skipped in this chain indicating that the even 
numbered cells cannot influence the output of the odd numbered cells at all, at least 
through the dg chain. 

In this instance, by having an odd displacement value for at least one input, 
such as d4, each cell may have the potential to influence the output of all other cells as 
time progresses. More generally, by including a displacement value of for an input of 
a cell that is not evenly divisible by the length of the CA, each cell of that CA may 
effect the output of all other cells of that CA. 

Note that a special case exists where a displacement value is 1 (or -1). If a 
displacement value is 1, then that particular chain touches all cells, even though 1 can 
always be divided evenly into whole numbers. 

The topology may be explicitly provided. Also, all possible topologies may be 
exhaustively calculated based on the neighborhood size N and the CA network size. 
To illustrate, again assume that N = 4 and CA network size is 64. Assuming periodic 
boundary conditions in all dimensions, the number of possible topologies is 64 * 63 * 
62 * 61 = 15,249,024. This is because the first input, such as dg, may be connected to 
an output of any of the 64 cells (including itself), the second input may be connected 
to any of the remaining 63 cells, and so on. 

The number of topologies may be pruned by applying conditions as stated 
above. For example, if one of the cell's inputs is required to be connected to the cell's 
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output, then the universe of topologies is reduced by a factor of 16. This is because 
the universe of topologies, using the same example, reduces to (1 * 63 * 62 * 61) + 
(63 * 1 * 62 * 61) + (63 * 62 * 1 * 61) + (63 * 62 * 61 * 1) = 4 * 63 * 62 * 61. 

Another pruning condition may be to require at least one chain of connections 
to touch all cells. For each chain required to touch all cells, the universe is further 
reduced by a factor of 2 for the above example. Thus, if each of the three remaining 
chains are required to touch all cells, then the universe of topologies is reduced by 
another factor of 8. Thus from the original universe of 15,249,024 topologies, the list 
of possible acceptable topologies may be reduced to 119,133 - a reduction factor of 
128(16x8). 

In step 315, CA-based RNG candidates may be determined for a particular 
topology provided in step 310. The exhaustive list of CA-based RNG candidates may 
be provided. For example, if N = 4, then the list of CA-based RNG candidates 
provided may range from CA00000 to CA65535. In this step, a particular CA, for 
example the CA06990 of Figure 1A, may be provided for the given particular 
topology, such as (-1, 0, 1,2) of Figure 2A. 

In step 320, the CA-based RNG candidate may be subjected to a screening 
process. The screening process may include calculating the entropy of the RNG 
candidate. If the calculated entropy does not meet one or more predetermined criteria, 
then the particular candidate may be rejected and the method 300 may continue by 
testing for more candidate RNGs in step 330. 

On the other hand, if the calculated entropy does meet the predetermined 
criteria, then in step 325, the particular candidate RNG may be kept and sorted. The 
predetermined criteria may include a predetermined threshold level of entropy. In 
other words, for any candidate RNG whose entropy is at or above the predetermined 
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threshold level, that candidate RNG may be kept. The criteria may also may include 
simply accepting a predetermined number of RNGs with the highest entropies. One 
of ordinary skill will recognize that the predetermined criteria are user settable 
parameters. 

An example entropy calculation process will be described, again using a 64- 
cell CA and N = 4. When the neighborhood size is 4, there are 2 16 (or 65,536) 
possible CAs for a given interconnection topology. The CAs can be exhaustively 
searched for high entropy candidates. A 2 N bit entropy (16 in this instance, entropy is 
defined to be S\e) is calculated according to the following formula: 



where 16-bit binary value of i represents the subsequence being tested and pi is 
the observed probability of its occurrence. Also, log2(0) is defined to be 0. Si6 has a 
maximum entropy value of 16 when all 16-bit substrings from all 0s to all Is occur 
with equal probability. 

For a given topology, each candidate RNG, starting from CA00000 to 
CA65535, is initialized by setting the state of the first cell (cell 0) to 1, setting the 
states of all other cells (1-63) to 0, and then by advancing the clock 80-cycles (length 
of the CA plus the 16 bit-serial registers used as part of the entropy calculation) which 
provides a first CA state. Each cell of the CA is connected to a separate 16 bit serial 
register. In this manner, a 16-bit history is kept for each cell. 

For a given CA state, 16-bit subsequences are checked from the perspective of 
all 64 bits in the CA. For example, the first check is on subsequence represented by 
bits 0-15, the second check is on bits 1-16, the third on 2-17, and so on until the 64 th 
check is on bits 63-14 (due to the periodic boundary condition). In addition to the 
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checks on the subsequences, the bit-serial registers connected to each cell of the CA 
are checked. Thus, a total of 128 checks are performed for a CA state. 

Then the clock is advanced to the next CA state and the CA is checked again. 
This process occurs for 2 13 clock cycles before proceeding to the next candidate RNG. 
5 Thus for a given CA, an expected count for any 16-bit subsequence is 16. The speed 
of the search may be increased considerably by rejecting any candidate RNG with any 
particular subsequence that exceeds some predetermined limit. For example, if the 
count of any subsequence exceeds 4 times the expected value, then that candidate 
RNG may be rejected. The reason is that such a candidate RNG is unlikely to have 
:f 10 high enough entropy to pass the suite of random number tests. 

i.y 
^% 

This process may be repeated for all candidate RNGs. Note that the above 
. rj process may be adjusted to calculate entropy for CA of any length and for any N. 

i;n In step 325, the candidate RNGs that pass the screening process of step 320 

;f may be kept and alternatively sorted. These candidate RNGs that pass the screening 

15 process may be likely to pass the suite of tests applied in step 340. The candidate 
RNGs may be sorted from highest entropy to lowest. 

In step 340, each candidate RNG that has passed the screening process of step 
320 may be subjected to a standard suite of random number tests, such as the 
DIEHARD suite, as mentioned previously. The DIEHARD suite of tests by 
20 Marsaglia and may be downloaded from the Internet (G. Marsaglia, DIEHARD, 
http://stat.fsu.edu/-geo/diehard.htmL 1998). Briefly, the DIEHARD suite comprises 
17 tests, each of which may generate one or more p-values. If the input is truly 
random, the p-values should be uniform over the range [0,1]. 

If the candidate RNG passes the suite of tests, then it may be accepted as a 
25 viable RNG in step 345. If not, the candidate RNG may be rejected in step 350. One 



■,-JL 
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of the criteria for passing may be that the candidate RNG must pass the suite of tests 
without time and/or site spacing. Recall that time spacing is where the RNG is 
advanced more than one step between random number samples and site spacing is 
where not every bit value generated is used. This allows for higher performing 
5 random number generators since all bits generated at every clock cycle may be used. 



HI. CA-based RNG Implementing-module 

Figure 4A illustrates an exemplary embodiment of a CA-based RNG 
implementing-module 400. As shown, the implementing-module 400 may include a 

its. 

10 topology-determining-module 410, a screening-module 420, and a testing-module 
430. Each of these modules will be further clarified in the discussion below with 

' >s 4 

= B exemplary implementation embodiments. 

m 

Figure 4B illustrates an exemplary embodiment of the topology-determining- 
it 

I* module 410 of Figure 4A. The steps performed by the topology-determining-module 

;! * 15 410 may include steps 310 and 360 of the method 300 and 300-2 of Figures 3 A and 

□ 

;T 3B. As shown in Figure 4B, the topology-determining-module 410 may include a 

topology-generation-module 412. The topology-generation-module 412 may take 
inputs and generate one or more topologies based on the inputs. For instance, the 
inputs may dictate a specific topology. In another instance, the inputs may comprise 
20 the neighborhood size N, length of the CA, number of dimensions of the CA, 
boundary conditions, and the like. The topology-generation-module 412 may 
generate one or more interconnection topologies based on the inputs. 

Also shown in Figure 4B, the topology-determining-module 410 may include 
a topology-pruning-module 414. The topology-pruning-module 414 may take the 
25 topologies generated by the topology-generation-module 412 and prune the topologies 
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based on a set on inputs. One simple example is that the inputs indicate no paining 
should take place. Another example is that the topologies may be pruned by 
eliminating all topologies that do not have a self-connection, i.e., eliminate topologies 
that have no inputs connected to its output. Still another example is to keep only 
those topologies that include one or more input chains that touch all cells of the CA. 
One of ordinary skill in the arts will recognize that the topology-pruning-module 414 
may operate under other pruning requirements. In addition, the topology-pruning- 
module 414 may enforce multiple pruning requirements, perhaps even 
simultaneously. 

Figure 4C illustrates an exemplary embodiment of the screening-module 420 
of Figure 4A. The steps performed by the screening-module 420 may include steps 
320, 325, and 330. As shown in Figure 4C, the screening-module 420 may include an 
entropy-calculating-module 422, which calculate entropies of the candidate RNGs. 

The entropy-calculating-module 422 may include an expected-value-module 
423 and an accumulating-module 425 as shown in Figure 4D. The expected-value- 
module 423 may calculate an expected count of subsequences of random number 
sequences. The accumulating-module 425 may accumulate actual counts of the 
subsequences. In this manner, a candidate RNG with a subsequence whose actual 
count exceeds a predetermined threshold may be rejected as discussed previously. 
The entropy-calculating-module 422 may also include an entropy-determining- 
module 427, which determines the entropy of the candidate RNG based on output(s) 
of the accumulating-module 425. 

Referring back to Figure 4C, the screening-module 420 may further include a 
sorting-module 424. The sorting-module 424 may compare entropies of multiple 
candidate RNGs for sorting purposes. The sorting-module 424 may also compare 



HP Docket No.: 10017475-1 



16 



entropies of the candidate RNGs against a predetermined threshold level of entropy. 
In this manner, candidate RNGs that are unlikely to pass the suite of tests may be 
screened off at this state. 

Referring back to Figure 4A, the testing-module 430 may take the candidate 
5 RNGs from the screening-module 420 and subject each to a suite of tests, such as the 
DIEHARD suite, to determine if the quality of the random numbers generated is 
satisfactory. The steps performed by the testing-module 430 may include steps 335, 
340, 345, and 355 of Figure 3 A. One of the criteria may be that the random numbers 
generated must pass the test suite without time and/or site spacing. 

10 While the invention has been described with reference to the exemplary 

embodiments thereof, those skilled in the art will be able to make various 
modifications to the described embodiments of the invention without departing from 
the true spirit and scope of the invention. For example, while the four-input CA- 
based RNGs were shown and illustrated, one of ordinary skill in the art would 

15 recognize that the description provided is applicable to CA-based RNGs with 
different number of inputs per cell. 

The terms and descriptions used herein are set forth by way of illustration only 
and are not meant as limitations. In particular, although the method of the present 
invention has been described by examples, the steps of the method may be performed 

20 in a different order than illustrated or simultaneously. Those skilled in the art will 
recognize that these and other variations are possible within the spirit and scope of 
the invention as defined in the following claims and their equivalents. 
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